Skip to content
OpenAdvisories
Medium · 4.3 CVE-2022-22391 EUVD-2022-27537GHSA-42fg-q2m2-v999

IBM Aspera High-Speed Transfer 4.3.1 and earlier could allow an authenticated user to obtain information from non sensitive operating syste…

Published Apr 14, 2022 · Updated Sep 16, 2024 · Assigned by ibm

Vendor: IBM Product: Aspera High-Speed Transfer Endpoint Product: Aspera High-Speed Transfer Server

Description

IBM Aspera High-Speed Transfer 4.3.1 and earlier could allow an authenticated user to obtain information from non sensitive operating system files that they should not have access to. IBM X-Force ID: 222059.

Affected products

VendorProductAffectedFixed
IBM Aspera High-Speed Transfer Endpoint 4.3.1 —
IBM Aspera High-Speed Transfer Server 4.3.1 —

References